CVE-2023-53376 — Out-of-bounds Read in Linux
Severity
7.1HIGHNVD
EPSS
0.0%
top 99.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Use number of bits to manage bitmap sizes
To allocate bitmaps, the mpi3mr driver calculates sizes of bitmaps using
byte as unit. However, bitmap helper functions assume that bitmaps are
allocated using unsigned long as unit. This gap causes memory access beyond
the bitmap sizes and results in "BUG: KASAN: slab-out-of-bounds". The BUG
was observed at firmware download to eHBA-9600. Call trace indicated that
the ou…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages7 packages
▶CVEListV5linux/linux824a156633dfdb0e17979a0d0bb2c757d1bb949c — 6a675a6d57d31da43d8da576465c1cd5d5b0bd3d+3
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-6f3q-hg2c-hwrx: In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Use number of bits to manage bitmap sizes
To allocate bitmaps, the↗2025-09-18
OSV▶
CVE-2023-53376: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Use number of bits to manage bitmap sizes To allocate bitmaps, the m↗2025-09-18